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© INFORMATION PROCESSING DEVICE HAVING FUNCTION OF PREVENTING PROGRAM FROM BEING 
UNJUSTLY USED. 



© An information processing device having a func- 
tion of preventing programs from being unjustly used 
includes a memory storing predetermined secret 
codes. Processing programs for the information pro- 
cessing device include the secret codes. When the 
secret code is read out during the execution of such 
a processing program, this secret code is compared 
with the secret code stored beforehand and whether 
*J the former coincides with the latter or not is judged. 
™ When coincides, the continuation of executing the 
^ program is allowed, and when does not coincide, the 
W execution is inhibited. Further, the information pro- 
cessing device includes a memory storing the rewrit- 
IO ing condition of the secret code stored in the mem- 
2 orv storing the secret codes, an input key for input- 
ting the rewriting condition of the secret code, and a 
O controller which when the rewriting condition is in- 
putted through the input key, judges whether or not 
111 the inputted rewriting condition conforms to the re- 
writing condition stored in the memory storing the 



rewriting conditions, and only when conforms to, 
allows the rewriting of the secret code stored in the 
memory storing the secret codes. 

FIG. 1 
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Technical Field 

The present invention relates generally to in- 
formation processing units having a function of 
preventing a program from being pirated and, more 
particularly, information processing units having a 
function of preventing a program from being pirat- 
ed, which prevents execution of the program by a 
unit having a different secret code. 

Background Art 

Methods for preventing a pirated copy of soft- 
ware have been known, in which it is made impos- 
sible to determine the kind of a PROM 
(Programmable* Read* Only 'Memory) by erasing a 
label provided for the PROM and in which a PROM 
fixed on a substrate is molded all together. In 
accordance with the former method, there is a 
probability that even if the label of the PROM is 
erased, the kind of the PROM is guessed by the 
arrangement or the number of pins. In accordance 
with the latter method, the contents stored in the 
PROM cannot be read out by a general PROM 
reader/writer and it is difficult to take out the same 
without destroying the PROM, so that copying can 
be effectively prevented to a considerable extent. If 
the PROM is removed from the mold without being 
destroyed, however, it is not impossible anymore 
to read out the contents stored in the PROM. 

Therefore, a principal object of the present 
invention is to provide an information processing 
unit having a function of preventing a program from 
being pirated in which even if software is read out 
from a memory, it is impossible for a different unit 
to execute the software. 

Disclosure of the Invention 

An information processing unit having a func- 
tion of preventing piracy of a program in accor- 
dance with the present invention includes secret 
code storage means in which a predetermined se- 
cret code is stored, program instruction execution 
means for fetching and executing instructions from 
a processing program including the secret code, 
determination means responsive to a secret code 
being fetched from the processing program by the 
execution means for comparing the fetched secret 
code and the secret code stored in the secret code 
storage means and determining whether or not 
there is a coincidence therebetween, and means 
responsive to a coincidence determination from the 
determination means for permitting execution by 
the execution means and responsive to a non- 
coincidence determination from the determination 
means for inhibiting execution by the execution 
means. 



The information processing unit having the 
function of preventing piracy of the program above 
may further include rewriting condition storage 
means having stored a rewriting condition of the 

5 secret code stored in the secret code storage 
means, input means for inputting the rewriting con- 
dition of the secret code, and rewriting control 
means for determining whether or not, when the 
rewriting condition from the input means is sup- 

io plied as input, the input rewriting condition satisfies 
the rewriting condition stored in the rewriting con- 
dition storage means and permitting rewriting of the 
secret code stored in the secret code storage 
means only when there is a conformity. 

is Furthermore, the above-mentioned information 

processing unit having a function of preventing 
piracy of the program may further include rewriting 
condition alteration means for altering the rewriting 
condition stored in the rewriting condition storage 

20 means and decision means for deciding whether or 
not to permit alteration of the rewriting condition by 
the rewriting condition alteration means. 

In accordance with the present invention, a 
secret code is included in a processing program. 

25 When the secret code is fetched during execution 
of the processing program, the secret code is 
compared with a secret code stored in advance 
and a determination is made as to whether there is 
a coincidence therebetween. If there is a coinci- 

30 dence, continuation of program execution is permit- 
ted while if there is no coincidence, the execution 
is inhibited. As another kind of unit has a different 
secret code, it is not possible to execute the pro- 
gram even if the program is copied. 

35 Additionally, since the secret code can be re- 

written, a new secret code may be supplied along 
with a program if the existing unit is to be used for 
another purpose. In this way, it is possible to 
operate the unit in a manner not so different from 

40 that for a system without a function of preventing 
piracy. 

Furthermore, even if a code for rewriting the 
secret code is leaked, the code for rewriting itself 
can be updated, so that a highly developed func- 
45 tion of preventing piracy of a program can be 
realized. 

Brief Description of the Drawings 

so Fig. 1 is a diagram for describing a basic 

scheme of a function for preventing piracy of a 
program in an ECR to which one embodiment of 
the present invention is applied. Fig. 2 is a per- 
spective view showing the appearance of the ECR 

55 to which one embodiment of the present invention 
is applied. Fig. 3 is a schematical block diagram 
showing an electrical structure of the ECR shown in 
Fig. 2. Figs. 4A, 4B and 4C are diagrams for 
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describing handling of a secret code in the ECR in 
accordance with one embodiment of the present 
invention. Fig. 5A is a flow diagram for describing a 
way of checking a secret code in application soft- 
ware. Fig. 5B is a flow diagram for describing a 
way of rewriting a secret code. Fig. 5C is a flow 
diagram for describing a way of altering a code 
used for rewriting a secret code. Fig. 6 is a dia- 
gram for describing use of the ECR in accordance 
with one embodiment of the present invention. 

Best Mode for Practicing the Invention 

It should be noted in advance that though an 
electronic cash register (hereinafter referred to as 
ECR) will be described below as one embodiment 
of the present invention, the invention is not limited 
to this and can be applied to any information 
processing unit that carries out processing by ex- 
ecution of a program. 

Fig. 1 is a diagram for describing a basic 
scheme for preventing piracy of a program in an 
ECR to which one embodiment of the present 
invention is applied. In Fig. 1, a subCPU 10 has a 
predetermined secret code (SPC) stored therein. 
Application software 25 being a user program has a 
predetermined secret code (SPC) written in each 
place of the program. 

When the application software 25 is executed 
and the secret code is read out, the secret code is 
supplied to subCPU 10 and a determination is 
made as to whether the secret codes coincide with 
each other in subCPU 10. If the secret codes 
coincide with each other, continuation of execution 
of the program is permitted while if there is no 
coincidence, execution of the program is inhibited. 
Accordingly, the program cannot be executed in a 
unit having a different secret code, so that it is not 
used for fraudulent purpose. 

Fig. 2 is a perspective view showing the ap- 
pearance of the ECR to which one embodiment of 
the present invention is applied. Fig. 3 is a 
schematical block diagram showing an electrical 
structure of the ECR shown in Fig. 2. The structure 
in accordance with one embodiment of the present 
invention will now be described with reference to 
Figs. 2 and 3. 

Referring to Fig. 2, a keyboard 2 as input 
means is provided for an ECR 1, and there are 
provided a printer 3, a display unit 4 for operator 
and a display unit 5 for customer as output means. 
Referring to Fig. 3, a main CPU 20 and a subCPU 
10 are provided for ECR 1. The above-mentioned 
keyboard 2 as input means, and printer 3, operator 
display unit 4 and customer display unit 5 as 
output means are connected to subCPU 10 to be 
controlled by subCPU 10. A control portion 11 and 
an internal memory 12 are provided for subCPU 



10. The secret code (SPC) above is stored in 
internal memory 12 and it is held by a battery 13. 
A ROM 21, a RAM 22, a clock 23 and other 
devices are connected to main CPU 20. Memories 
5 such as ROM 21 and RAM 22 have stored therein 
application software for performing each kind of 
function as an ECR. 

Figs. 4A, 4B and 4C are diagrams for describ- 
ing handling of a secret code in the ECR of one 
w embodiment of the present invention and, more 
particularly, Fig. 4A shows a way of checking the 
secret code of the application software, Fig. 4B 
shows a way of rewriting the secret code, and Fig. 
4C shows a way of altering a code used for rewrit- 
T5 ing the secret code. 

Figs. 5A, 5B and 5C are diagrams for describ- 
ing the operation in accordance with one embodi- 
ment of the present invention and, more particu- 
larly, Fig. 5A shows an operation corresponding to 
20 Fig. 4A, Fig. 5B shows an operation corresponding 
to Fig. 4B and Fig. 5C shows an operation cor- 
responding to Fig. 4C. 

A description will now be made of a scheme in 
which permission/inhibition of execution of the ap- 
25 plication software is controlled with reference Figs. 
4A and 5A. 

A program (application software) to be execut- 
ed by main CPU 20 has written therein a multiplic- 
ity of secret codes (referred to as SPC in the 

30 figures). A secret code includes a bit string of 64 
bits, for example. In main CPU 20, when the power 
supply is turned on and initialization is carried out, 
then the secret code is checked. That is, a secret 
code (SPC2) which has been written in the pro- 

35 gram is read out and transferred to subCPU 10. 

Control portion 11 of subCPU 10 remains in a 
wait state until the secret code is transmitted. 
When the secret code is transmitted, in subCPU 
10, the received secret code (SPC2) is compared 

40 with a secret code (SPC1) stored in internal mem- 
ory 12 and a determination is made as to whether 
there is a coincidence therebetween. If there is a 
coincidence, an execution permission signal (an 
OK signal in the figure) is transmitted back to main 

45 CPU 20. If there is no coincidence, an execution 
inhibition signal (an NG signal in the figure) is 
transmitted back to main CPU 20 after an idle time 
of 1 second, for example, is counted. Here, making 
it impossible to easily find the secret code is the 

so reason for counting the idle time. That is, even if a 
person who intends piracy continuously generates 
secret codes using application software, trying to 
find the secret code by checking each secret code, 
it takes 2 s4 x idle time to check a secret code 

55 including a bit string of 64 bits, for example, prac- 
tically making it impossible for him or her to find 
the secret code. 
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tf an execution inhibition signal is supplied in 
main CPU 20, the processing is interrupted while if 
an execution permission signal is supplied, the 
processing is continued. ECR 1 performs each kind 
of function by key manipulation. For example, if a 
key code A is input, a predetermined process A is 
carried out or if a key code N is input, a predeter- 
mined process N is carried out. Specifically, the A 
process, the N process and so on are a registration 
process, a summing process, a ruling process, a 
checking process and so on. Also in these pro- 
cesses, if the secret code (SPC) appears, it is 
checked with the above-mentioned secret code 
written in each point of the application software in 
the same way as stated above, and only when 
execution permission is given, the process is con- 
tinued and a displaying process, a printing process 
and so on are carried out. 

In this way, even if the application software 
stored in memories 21, 22 of main CPU 20 is 
copied and transferred to another device by a third 
person, it cannot be operated as far as a secret 
code does not coincide with the secret code exist- 
ing in subCPU 10. 

The copied software can be operated by copy- 
ing and transferring the secret code within subCPU 
10 of the device whose program is to be pirated, to 
a device which is to use the same. In this embodi- 
ment, however, as a way of writing the secret code, 
a program is made within subCPU 10, the secret 
code is written in internal memory 12 by an in- 
struction from main CPU 20, and reading out from 
or writing in the internal memory cannot be per- 
formed using another device in a normal CPU, so 
that the third person cannot use the application 
software even if he or she copies the same. 

Furthermore, as shown in Fig. 3, since subCPU 
10 is interposed between main CPU 20 and the 
input/output means, timing for checking the secret 
code cannot be found only by checking a signal 
transmitted between subCPU 10 and main CPU 20. 

The reason for it is that the signals transmitted 
between subCPU 10 and main CPU 20 include a 
signal for input/output as well as a signal for check- 
ing the secret code. Accordingly, it is also ex- 
tremely difficult to find the secret code from the 
application program. In this way, in accordance 
with this embodiment, a highly developed function 
for preventing program piracy can be provided. 

However, there are disadvantages for practical 
use in this case. That is, though the application 
software and the secret code have been provided 
in the plurality of ECRs 1, in shipping the ECRs to 
another customer after changing their application 
software, even if only new application software is 
copied for all the ECRs, the program cannot be 
executed since the secret codes do not coincide 
with each other. In this case, if the secret code 



could be altered, it would be advantageous since 
the secret code of the application software would 
not need to be altered. Figs. 4B and 5B show an 
operation for altering the secret code. 

s Referring to Fig. 5B, if a secret code check 

routine of the application software appears, a 
coincidence/non-coincidence between the secret 
codes is determined in the same way as stated in 
Fig. 5A, and the determination result is supplied to 

io main CPU 20. Then, when a key code KEY1 
(KEY1-2 in Fig. 5B) for rewriting the secret code 
and a new secret code which is desired to be 
newly used are input by manipulation of a specific 
key of ECR 1 or by another input means, the 

rs secret code, KEY1 and a new secret code are 
supplied to the side of subCPU 10 from the side of 
main CPU 20. 

Internal memory 12 of subCPU 10 has a key 
code KEY1 (KEY1-1 in Fig. 5B) stored therein in 

20 advance. In subCPU 10, if the secret code, KEY1 
and the new secret code are supplied from the 
side of main CPU 20, the secret code and KEY1 
are read out from internal memory 12, and a 
coincidence/non-coincidence between the secret 

25 code of the application software 25 and the secret 
code of internal memory 12 and a coincidence/non- 
coincidence between the transmitted KEY1 and 
KEY1 of internal memory 12 are both determined. 
If the secret codes coincide with each other and 

30 KEY1s coincide with each other, a signal indicating 
"rewritable" is transmitted back to main CPU 20 
and the secret code of internal memory 12 is 
rewritten to a new secret code. As a result, the 
internal memory changes from a stage indicated by 

35 the reference numeral 12 to a state indicated by 
the reference numeral 12a shown in Fig. 4B. 

Conversely, if either the secret codes or KEY1s 
do not coincide with each other, the idle time is 
counted in the same way as stated above, and then 

40 a signal indicating "not rewritable" is transmitted 
back to main CPU 20. In main CPU 20, when a 
signal indicating the result of the check is supplied 
from the side of subCPU 10, the contents thereof 
are displayed on operator display unit 4. 

45 As stated above, in accordance with this em- 
bodiment, only when the secret code included in 
the subCPU coincides with the secret code existing 
in the application software, a normal operation is 
carried out and, furthermore, the secret code can 

so be altered by another key code (KEY1), so that 
flexible use of devices in the same manner as the 
conventional one can be realized while maintaining 
an enhanced function of preventing software piracy 
at the same time. 

55 A method of altering the above-mentioned key 

code KEY1 will now be described with reference to 
Figs. 4C and 5C. KEY1 must be altered when 
KEY1 is known to a third party in some way. 
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Referring to Fig. 5C, rf a secret code check 
routine of the application software appears, a deter- 
mination is made as to a coincidence/non-coinci- 
dence between the secret codes in the same way 
as stated above and the determination result is 
supplied to main CPU 20. Then, when a key code 
KEYo (KEYa-1 in Fig. 5C) for rewriting the key 
code KEY1 and a new key code KEY1 are input by 
manipulation of a specific key of ECR 1 or by 
another input means, the secret code, KEYa and 
the new KEY1 are supplied to the side of subCPU 
10 from the side of main CPU 20. 

Internal memory 12 of subCPU 10 has KEYa - 
(KEYa-2 in Fig. 5C) stored therein in advance. In 
subCPU 1 0, if the secret code, KEYa and the new 
key code KEY1 are transmitted from the side of 
main CPU 20, the secret code and KEYa are read 
out from internal memory 12 and, subsequently, a 
determination is made as to a coincidence/non- 
coincidence both between the secret code of the 
application software 25 and the secret code of 
internal memory 12 and between the transmitted 
KEYa and KEYa of internal memory 12. If the 
secret codes coincide with each other and KEYas 
coincide with each other, a signal indicating that 
KEY1 can be altered is transmitted back to main 
CPU 20 and KEY1 of internal memory 12 is altered 
to a new code. As a result, as shown in Fig. 4C, 
the internal memory changes from a stage in- 
dicated by the reference numeral 12 to a state 
indicated by the reference numeral 12b. 

Conversely, if either the secret codes or KEYas 
do not coincide with each other, a signal indicating 
that KEY1 cannot be altered is transmitted back to 
main CPU 20. In main CPU 20, when a signal 
indicating the result of the check is supplied from 
the side of subCPU 10, the contents thereof are 
displayed on operator display unit 4. 

Fig. 6 is a diagram for describing practical use 
of an ECR having functions of checking a secret 
code and of rewriting a secret code and a key 
code as described above. As shown in Fig. 6, ECR 
1 is shipped from the factory with KEY1 and KEYa 
being set in internal memory 12 of subCPU 10. At 
this time, neither an application program nor a 
secret code (SPC) is set in ECR 1 . The unit is sent 
to a selling agent and stocked there. After selling, 
when a buyer and application software to be incor- 
porated therein are determined, the application 
software is written in memories 21 and 22 and a 
secret code conforming to it is written therein to be 
shipped to an ultimate user through a dealer 30. 
The software of the device shipped in this way 
does not operate with a device having a different 
secret code even if it is copied, so that it is not 
likely to be used for fraudulent purposes. 



However, there is a case where application 
already set in a device is altered to another ap- 
plication to be directed to another customer. In 
such a case, a new secret code is set using KEY1 

5 while incorporating new application software into 
the memory at the same time. In this way, in a 
system having a function of preventing software 
piracy, a device can be used in almost the same 
manner as in a system having no software piracy 

10 preventing function. 

Important in this case is a manner of control- 
ling the secret code. In this embodiment, the secret 
code is controlled in the following manner. That is, 
KEY1 is controlled in the factory and only an au- 

75 thorized senior supervisor knows it. While an au- 
thorized senior supervisor at the selling agent is 
informed of KEY1, a junior supervisor is not in- 
formed. The secret code (SPC) can only be treated 
by the authorized junior supervisor at the selling 

20 agent and it is not revealed to others. Accordingly, 
if the secret code is to be altered to a new secret 
code, it cannot be altered without cooperation of 
the two supervisors above. Though it is necessary 
to alter KEY1 to a new KEY1 in case KEY1 is 

25 leaked, the authorized senior supervisor at the fac- 
tory can alter the same using KEYa at the time 
when the leak is found. 

As stated above, in accordance with this inven- 
tion, the secret code which is set in the device in 

30 advance is compared with the secret code included 
in the program and execution of the program is 
permitted only when there is a coincidence there- 
between, so that the program cannot be executed 
in a device having a different secret code. 

35 Additionally, since the secret code is adapted 

to be rewritten, the existing device can be used for 
another purpose by providing a new secret code 
along with a program. 

Furthermore, in case the code for rewriting the 

40 secret code is leaked, the code for rewriting the 
secret code can be altered using another predeter- 
mined code, so that a highly enhanced function of 
preventing piracy of a program can be realized. 

45 Claims 

1. An information processing unit having a func- 
tion of preventing a program from being pirat- 
ed, comprising: 
50 secret code storage means in which a 

predetermined secret code is stored, 

program instruction execution means for 
fetching an instruction from a processing pro- 
gram including a secret code and executing 
55 the same, 

determination means responsive to a se- 
cret code being fetched from said processing 
program by said execution means for compar- 
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ing the fetched secret code with the secret 
code stored in said secret code storage means 
and making a determination whether or not 
there is a coincidence therebetween, and 

means responsive to a coincidence deter- 5 
mination from said determination means for 
permitting execution by said execution means 
and responsive to a non-coincidence deter- 
mination from said determination means for 
inhibiting execution by said execution means. w 

The information processing unit according to 
claim 1 , further comprising: 

rewriting condition storage means having 
stored a rewriting condition of the secret code 75 
stored in said secret code storage means, 

input means for inputting the rewriting con- 
dition of said secret code, and 

rewriting control means responsive to a 
rewriting condition being input from said input 20 
means for determining whether or not the input 
rewriting condition conforms to the rewriting 
condition stored in said rewriting condition 
storage means, and permitting rewriting of the 
secret code stored in said secret code storage 25 
means only when there is a conformity. 

The information processing unit according to 
claim 2, further comprising 

rewriting condition alteration means for al- 30 
tering the rewriting condition stored in said 
rewriting condition storage means, and 

decision means for deciding whether or 
not to permit alteration of the rewriting con- 
dition by said rewriting condition alteration 35 
means. 

An information processing unit having a func- 
tion of preventing a program from being pirat- 
ed and including a main processing unit and a ao 
subprocessing unit, wherein said main pro- 
cessing unit includes 

program storage means for storing a pro- 
cessing program including a unique secret 
code, and 45 

means responsive to a program instruction 
stored in said storage means for executing the 
program instruction, 

said sub processing unit includes 

secret code storage means in which a 50 
predetermined secret code is stored, and 

determination means responsive to a se- 
cret code being fetched from said processing 
program by said program instruction execution 
means for comparing the fetched secret code 55 
with the secret code stored in said secret code 
storage means and making a determination 
whether or not there is a coincidence there- 



between, and 

said program instruction execution means 
includes 

means responsive to a coincidence deter- 
mination from said determination means for 
permitting execution by said execution means, 
and 

means responsive to a non-coincidence 
determination from said determination means 
for inhibiting execution by said execution 
means. 

5. The information processing unit according to 
claim 4, further comprising first input means 
for inputting a rewriting condition of the secret 
code stored in said secret code storage 
means, wherein said subprocessing unit further 
includes 

rewriting condition storage means having 
stored the rewriting condition of the secret 
code stored in said secret code storage 
means, 

means responsive to a rewriting condition 
being input from said first input means for 
determining whether or not the input rewriting 
condition conforms to the rewriting condition 
stored in said rewriting condition storage 
means, and 

rewriting control means responsive to a 
conformity determination output from said de- 
termination means for permitting rewriting of 
the secret code stored in said secret code 
storage means. 

6. The information processing unit according to 
claim 5, further comprising second input 
means for inputting rewriting condition alter- 
ation information for altering the rewriting con- 
dition stored in said rewriting condition storage 
means, wherein said subprocessing unit further 
includes 

means for storing rewriting condition alter- 
ation information for altering the rewriting con- 
dition stored in said rewriting condition storage 
means, 

means responsive to an input of said sec- 
ond input means for determining whether or 
not input alteration information coincides with 
the alteration information stored in said alter- 
ation information storage means, and 

means responsive to a coincidence deter- 
mination output of said determination means 
for altering the rewriting condition stored in 
said rewriting condition storage means. 
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FIG. 5A 
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